Privacy Policy

Your privacy is not for sale

Simply put, we do not and will not use your personal information for any reason, other than as described in this Privacy Policy. PicnicHealth uses and discloses your personal information only as follows:

• to provide the Service;
• to analyze site usage and improve the Service;
• for internal administration;
• to deliver to you any administrative notices, health alerts and communications relevant to your use of the Service;
• to fulfill your requests for certain products and services;
• for market research, project planning, troubleshooting problems, detecting and protecting against error, fraud or other criminal activity;
• to third-party contractors that provide services to PicnicHealth and are bound by these same privacy restrictions;
• to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
• to contact you in response to a request;
• to a buyer or successor in the event of a merger or acquisition;
• to comply with a court order, law or legal process;
• to enforce PicnicHealth’s Terms of Use;
• to protect the security and integrity of our information systems;
• if we reasonably believe that disclosure is necessary or appropriate to protect the rights, property or safety of PicnicHealth or others;
• for another purpose disclosed by us when you provide the information;
• for any other purposes with your consent;
• and as otherwise set forth in this Privacy Policy.

We limit the collection and use of personal information

Certain areas and features of PicnicHealth.com are available to you without registration or the need to provide to us any information. However, other features of the Site or the Service may require registration, which involves provision to PicnicHealth of an email address, a password and a username (collectively the “Registration Information”).

We collect personal information about you from you directly when you fill out forms on the Site and certain details automatically when you navigate through our Site. This personal information includes identifying information such as name, address, email address, phone number, or fax number.

From time to time we may request other personal information to provide you with other benefits of the Service. In all such instances, you will be given the opportunity to provide or to decline to provide that information, and it will be used only for the stated purpose. PicnicHealth may make anonymous or aggregate personal information and disclose such data only in a non-personally identifiable manner to:

• Organizations approved by PicnicHealth that conduct research into health; and
• Users of the Service for purposes of comparison of their personal health situation relative to the broader community.

Access to your Registration Information and any other personal information you provide is strictly restricted and used in accordance with specific internal procedures and safeguards governing access, in order to operate, develop or improve the Service. These individuals have been selected in accordance with our security policies and practices and are bound by confidentiality obligations. They may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.

Changes to your registration information

If your Registration Information changes during your subscription to PicnicHealth, you may update it any time via the Service.

Third-party websites

Our Site may contain links or references to other websites outside of our control.  Please be aware that this Privacy Policy does not apply to third-party websites.  PicnicHealth does not control and is not responsible for what third parties do with your personal information.  Please exercise caution and consult the privacy policies posted on each third-party website for further information.

PicnicHealth Blog

If you comment on the blog on our Site, you should be aware that any information you submit there can be read, collected or used by other users and could be used to send you unsolicited messages. We are not responsible for the personal information you choose to submit through this forum.

Data retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.  We will retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

You can transport or delete your data

Your data is yours. You can remove it anytime you want. When you request us to delete your account for the Service, your personal information will be permanently expunged from our primary production servers and further access to your account will not be possible. You can contact us at [email protected] if you would like to amend or delete your personal information.

Email communications from us

From time to time we may provide our registered customers with email alerts or email newsletters. PicnicHealth subscribers have the ability to opt-out of receiving our promotional emails and to terminate their newsletter subscriptions by following the instructions in the emails to unsubscribe. Opting out in this manner will not end transmission of service-related emails, such as email alerts concerning your records or use of the Service.

Your data security is a top priority

We protect your personal data through a combination of controls and best practices, however no data protection procedures are ever completely secure. Your transmission of your personal information to us is done entirely at your own risk.

We use a combination of firewall barriers, encryption techniques and authentication procedures, among others, to maintain the security of your online session and to protect PicnicHealth accounts and systems from unauthorized access.

When you register for the Service, PicnicHealth.com requires a password from you for your privacy and security. PicnicHealth transmits information such as your Registration Information for PicnicHealth.com or Portal Credentials securely.

Our servers are maintained in a facility that is protected by industry best practices and commercially reasonable security precautions.

Our databases are protected from general employee access both physically and logically. We encrypt your Service password so that your password cannot be recovered, even by us. All backup drives and tapes also are encrypted.  We enforce physical access controls to our buildings.

No employee may put any sensitive content on any insecure machine (i.e., nothing can be taken from the database and put on an insecure laptop).

Our service ensures secure communications with encryption

From the time you submit your Login ID and Password, these communications between your computer and PicnicHealth.com are encrypted. This enables client and server applications to communicate in a way that is designed to prevent eavesdropping, tampering and message forgery.

Children under the age of 18

Our Site and Services are not intended for use by children under the age of 18 without parental consent.  If you are under the age of 18, your parent or legal guardian must create your account, submit your personal information, and agree to this Privacy Policy on your behalf.

If you are under the age of 13, you may only access our Site and use our Services with the supervision or consent of your parent or legal guardian.  We will not require you to disclose more information than is reasonably necessary to allow us to provide the Services.  Your parent or guardian may review your personal information, direct us to delete it, and refuse to allow further collection or use of your personal information.  Please note that deleting or refusing to allow collection of your personal information will prevent us from providing the Services.

If we learn that we have collected personal information from a minor under the age of 13 without verification of consent from a parent or guardian, we will delete that information.  If you believe that we have impermissibly collected personal information from or about a minor under the age of 13, or if your parent or legal guardian wishes to review your personal information, please contact us at [email protected].

California Resident Privacy Rights

Residents of the State of California have the right to request from certain businesses with whom the California resident has an established business relationship a list of all third parties to which the business, during the immediately preceding calendar year, has disclosed certain personally identifiable information for direct marketing purposes. We are only required to respond to a customer request once during any calendar year. To obtain this information, you should send a written request to [email protected] with the subject heading “California Privacy Rights.” In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California Privacy Rights requirements and only information on covered sharing will be included in our response.

As described in this Privacy Policy, we may make use of third-party tracking technologies or other online marketing services.  In doing so, we may make available or transfer your personally identifiable information (including your IP address, geolocation data, and Internet or other similar network activity) to third parties, such as advertising agencies, analytics providers, sponsored content providers, social media platforms and other similar technology companies.  In certain cases, sharing data with these providers could be considered a “sale” under the California Consumer Privacy Act, even though it is not a sale in the traditional sense.  You may request to opt out of these cookies on our Site by contacting us at [email protected] with the subject heading “California Opt Out.”

General Data Protection Regulation

We do not knowingly collect personal information about individuals residing in the European Union.  If you believe that we have collected or processed personal information about any individuals residing in the European Union, please contact us immediately at [email protected] with the subject heading “GDPR.”

We post updates on our website whenever there is a change to our privacy and security policy.

We update this Privacy Policy periodically. The revision date appears at the top of the Policy. Changes take effect immediately upon posting.  Your continued use of the Site and the Services will be deemed to be your agreement that your personal information may be used in accordance with any changes.  If you do not agree with the changes, then you should stop using the Site and the Services and notify us that you do not want your personal information used in accordance with the changes.